Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/323830343a316564633a383030303a3a2f33342d3334203d3e20323634343530.roa
File:                     323830343a316564633a383030303a3a2f33342d3334203d3e20323634343530.roa (raw, json)
Hash identifier:          8bll2wVaA1ZJWkJxWa2QH90KKVzBphRILlHisowfF+A=
Subject key identifier:   AC:01:1A:C6:C9:7B:C2:AD:E6:2A:A2:7A:F1:70:20:EB:64:3D:99:A9
Certificate issuer:       /CN=C9ECAC7AB6BED4BE6B6F62B498C830B2F16D2CF8
Certificate serial:       0FFB2BDFC47D3C893BDE7C6791CE81B46167C1BA
Authority key identifier: C9:EC:AC:7A:B6:BE:D4:BE:6B:6F:62:B4:98:C8:30:B2:F1:6D:2C:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9ECAC7AB6BED4BE6B6F62B498C830B2F16D2CF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/323830343a316564633a383030303a3a2f33342d3334203d3e20323634343530.roa
Signing time:             Thu 03 Nov 2022 17:14:48 +0000
ROA not before:           Thu 03 Nov 2022 17:09:48 +0000
ROA not after:            Thu 02 Nov 2023 17:14:48 +0000
asID:                     264450
IP address blocks:        2804:1edc:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:fb:2b:df:c4:7d:3c:89:3b:de:7c:67:91:ce:81:b4:61:67:c1:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9ECAC7AB6BED4BE6B6F62B498C830B2F16D2CF8
        Validity
            Not Before: Nov  3 17:09:48 2022 GMT
            Not After : Nov  2 17:14:48 2023 GMT
        Subject: CN=AC011AC6C97BC2ADE62AA27AF17020EB643D99A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dd:bd:31:90:33:14:5a:d0:f8:02:cb:79:e9:
                    d7:38:05:30:fc:5f:5a:a3:63:2b:a9:a9:54:0f:ca:
                    4c:8e:42:8f:f3:d1:41:9d:d2:62:47:94:0a:82:10:
                    7c:0e:c1:b7:2a:c5:e4:a0:88:14:c7:27:34:c0:f7:
                    72:66:14:b3:51:f5:5a:74:9c:b0:7d:cb:6d:a6:b5:
                    b2:73:41:60:b3:f2:52:e9:28:42:e4:85:08:84:29:
                    54:dd:40:41:ba:5b:65:18:12:7b:a0:77:27:88:4e:
                    b1:03:66:b8:0b:82:7a:3d:1b:58:ea:20:0a:48:1a:
                    34:ed:9f:bc:67:51:46:ff:e8:d7:9d:1e:36:b8:6a:
                    4d:fe:d0:0e:e3:14:c9:22:f5:66:a4:a2:42:f7:a4:
                    0a:28:76:27:f7:b5:d6:62:5d:1e:41:9d:f2:11:e2:
                    2b:64:ea:be:ba:0a:e5:5e:64:e7:3a:e0:00:c6:00:
                    e6:a4:38:df:72:16:e1:e3:ab:2e:2f:f1:fc:06:b4:
                    e4:70:50:24:c1:93:93:8a:f1:42:6f:cb:7f:a4:1a:
                    db:c9:8b:9d:b4:26:f7:b0:52:ce:f0:0a:a5:67:04:
                    03:1d:3f:20:2c:e8:d0:aa:cf:77:5e:93:f7:10:2d:
                    05:9a:77:e5:e2:3b:c7:70:7b:1d:1e:b6:0d:02:45:
                    4b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:01:1A:C6:C9:7B:C2:AD:E6:2A:A2:7A:F1:70:20:EB:64:3D:99:A9
            X509v3 Authority Key Identifier:
                keyid:C9:EC:AC:7A:B6:BE:D4:BE:6B:6F:62:B4:98:C8:30:B2:F1:6D:2C:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/C9ECAC7AB6BED4BE6B6F62B498C830B2F16D2CF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9ECAC7AB6BED4BE6B6F62B498C830B2F16D2CF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/323830343a316564633a383030303a3a2f33342d3334203d3e20323634343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1edc:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         34:d3:54:24:f9:d8:0b:c9:52:f1:a2:86:78:12:6c:fa:f7:c9:
         31:eb:16:13:a6:54:29:77:f8:5e:b2:26:f4:90:9c:76:51:00:
         c7:d6:e0:86:41:3b:77:64:fb:55:28:02:2d:64:1d:31:9d:47:
         af:62:37:f7:05:97:08:97:2e:95:2c:88:0b:3f:bf:43:81:cd:
         61:18:a1:57:bf:f8:c6:94:95:1f:71:84:9b:bd:69:e3:df:54:
         02:51:29:16:a5:9c:16:0e:39:ed:62:ea:50:07:7b:9c:c3:af:
         14:d3:57:a9:3e:8b:86:0a:f9:a9:9d:fa:52:13:d2:29:f0:39:
         84:d8:63:51:46:64:c6:b2:e4:3c:eb:02:40:3c:07:c3:d0:e2:
         fe:6d:2d:d5:9b:bc:d2:0b:a2:c0:68:c6:4c:53:1c:c2:af:e3:
         b6:40:33:c7:bb:8c:85:b7:fe:1d:5c:9c:84:e8:00:1c:ec:dd:
         ae:d8:95:4a:a6:e5:0d:20:94:87:94:91:b9:d4:a1:82:a9:74:
         00:9d:a2:bc:f4:b1:dc:ef:6e:7f:9c:86:29:75:03:2e:4d:90:
         ca:50:7e:75:f7:f2:23:71:41:b6:51:68:7d:79:e8:06:aa:a0:
         b8:44:57:92:10:d1:3e:fc:71:81:a3:8a:d8:54:1c:76:98:f6:
         14:2e:03:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org